EP1361508A1 - Gerätesteuerungssystem - Google Patents

Gerätesteuerungssystem Download PDF

Info

Publication number
EP1361508A1
EP1361508A1 EP03010492A EP03010492A EP1361508A1 EP 1361508 A1 EP1361508 A1 EP 1361508A1 EP 03010492 A EP03010492 A EP 03010492A EP 03010492 A EP03010492 A EP 03010492A EP 1361508 A1 EP1361508 A1 EP 1361508A1
Authority
EP
European Patent Office
Prior art keywords
instruction
control
control instruction
issue
section
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP03010492A
Other languages
English (en)
French (fr)
Inventor
Yasuo Takeuchi
Osamu Sasaki
Yoshiaki Nakanishi
Yoshihiko Takagi
Kazunori Inoue
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Panasonic Holdings Corp
Original Assignee
Matsushita Electric Industrial Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Matsushita Electric Industrial Co Ltd filed Critical Matsushita Electric Industrial Co Ltd
Publication of EP1361508A1 publication Critical patent/EP1361508A1/de
Withdrawn legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/40—Transformation of program code
    • G06F8/54—Link editing before load time
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/12—Detection or prevention of fraud
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/65—Updates
    • G06F8/656—Updates while running
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H04L63/1466—Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks

Definitions

  • the present invention relates to an apparatus control system, and more particularly, to an apparatus control system that performs control of instruction and execution among three apparatuses.
  • JP2001-508253 discloses a method where external terminal (first apparatus) 10 conveys control instructions to SIM card (third apparatus) 30 that mobile station (second apparatus) 20 holds (see FIG.1).
  • the external apparatus is capable of controlling information of SIM card 30 connected to portable terminal (mobile station) 20 via SIM control element 22 of portable terminal 20.
  • the control instruction transmitted from the outside or SIM control element 22 is transferred directly to SIM card 30 without being converted, and the instruction is executed.
  • SIM card 30 outputs reply information or notice of receipt to mobile station 20.
  • the control instruction transferred from outside or SIM control element 20 has the same contents as the instruction executed in SIM card 30. Further, the control instruction transmitted to SIM card 30 is to control SIM card 30.
  • the need is extremely high for establishing an apparatus control system provided with integrity and concealment of data including authentication of a first apparatus and transmitted control instructions.
  • the subject matter of the present invention is that the first apparatus does not directly transmit control instructions to the second apparatus, the third apparatus connected to the second apparatus controls the second apparatus instead, thereby enhancing the security of authentication, and the second apparatus executes processing using control instructions registered with the third apparatus.
  • the first apparatus transmits via the second apparatus an issue instruction that is an instruction for requesting an issue of a control instruction to the third apparatus that stores the control instruction for the second apparatus, the third apparatus transmits the control instruction to the second apparatus, and the second apparatus executes the control instruction.
  • the apparatus control system is provided with the first apparatus having a transmitting section that transmits an issue instruction that is an instruction for issuing a control instruction for the second apparatus, the second apparatus having an instruction executing section that executes the control instruction from the third apparatus, and the third apparatus having a control instruction generating section that generates a control instruction for the second apparatus and a terminal control section that issues the control instruction to the second apparatus, where the second apparatus transfers the issue instruction received from the first apparatus to the third apparatus, and the third apparatus transmits to the second apparatus a control instruction corresponding to the issue instruction transferred from the second apparatus.
  • an apparatus control apparatus has a control instruction generating section that generates a control instruction for a second apparatus and a communication section that communicates with the second apparatus, where an issue instruction that is an instruction for requesting an issue of a control instruction for the second apparatus is received from the second apparatus, while a control instruction corresponding to the issue instruction is transmitted to the second apparatus.
  • an issue instruction transmitting apparatus has a section that performs wired communications and/or wireless communications and an issue instruction generating section that generates an issue instruction that is an instruction for requesting an issue of a control instruction for a second apparatus, where the issue instruction is transmitted to the second apparatus.
  • a control instruction executing apparatus has a section that communicates with a first apparatus, a section that communicates with a third apparatus and an instruction executing section that executes a control instruction, where an issue instruction that is an instruction for requesting an issue of a control instruction received from the first apparatus is transferred to the third apparatus, while the control instruction corresponding to the issue instruction is received from the third apparatus to be executed.
  • a program has the steps of generating an issue instruction that is an instruction for requesting an issue of a control instruction for a second apparatus, and transmitting the generated instruction to the second apparatus.
  • a program has the steps of receiving an issue instruction that is an instruction for requesting an issue of a control instruction for a second apparatus from the second apparatus, generating the control instruction corresponding to the issue instruction, and transmitting the control instruction to the second apparatus.
  • a program executed in a second apparatus has the steps of receiving an issue instruction that is an instruction for requesting an issue of a control instruction for a second apparatus from a first apparatus, transmitting the received issue instruction to a third apparatus, receiving the control instruction corresponding to the issue instruction from the third apparatus, and executing the received control instruction.
  • FIG.2 is a block diagram illustrating a configuration of an apparatus control system according to the first embodiment of the present invention.
  • the apparatus control system in this embodiment has first apparatus 100, second apparatus 200 and third apparatus 300.
  • third apparatus 300 that assures the security protection of data stores control instructions for second apparatus 200, first apparatus 100 requests an issue of a control instruction stored in third apparatus 300, and third apparatus 300 controls second apparatus 200.
  • first apparatus 100 transmits an issue instruction for second apparatus 200 to third apparatus 300 as a trigger.
  • Third apparatus 300 receives the issue instruction that is an instruction for requesting an issue of a control instruction from first apparatus 100 via second apparatus 200, performs predetermined processing on the issue instruction, and issues the control instruction stored in the apparatus 300 to second apparatus 200.
  • second apparatus 200 receives the control instruction, executes the control instruction in instruction executing section 202 in the apparatus 200, and transmits an execution result.
  • FIG.3 is a block diagram illustrating a configuration of an apparatus control system according to the second embodiment of the present invention.
  • the apparatus control system in this embodiment has the same basic configuration as that of the apparatus control system explained in the first embodiment, and has a configuration provided with external terminal 100a as first apparatus 100, portable terminal 200a such as a cellular telephone and PDA (Personal Digital Assistance) as second apparatus 200, and IC card 300a as third apparatus 300.
  • external terminal 100a as first apparatus 100
  • portable terminal 200a such as a cellular telephone and PDA (Personal Digital Assistance)
  • IC card 300a as third apparatus 300.
  • the apparatus control system of this embodiment may have a microcomputer card or another card with such a function, instead of IC card 300a.
  • the IC card herein includes a device with the IC card and memory card.
  • any devices are available independently of their name such as an IC card, as long as the devices are memory devices that are detachable from second apparatus 200 and have tamper-resistant areas to store control instructions to be transmitted to second apparatus 200.
  • Portable terminal 200a as the second apparatus is in the broad sense as described, and includes all mobile portable devices.
  • the apparatus control system has external terminal 100a, portable terminal 200a that has functions of communicating with outside, and IC card 300a capable of connecting to portable terminal 200a.
  • External terminal 100a that transmits an issue instruction has issue instruction generating section 110 that generates an issue instruction, an output section 120 that outputs a received execution result, and transmitting section 130 and receiving section 140 to communicate with other apparatuses.
  • Portable terminal 200a has transmitting section 210 and receiving apparatus 220 to communicate with external apparatus 100a, instruction executing section 230 that executes a control instruction, storage section 240 that stores information therein, display section 250 that displays an execution result and stored information, and input section 260 that inputs data to portable terminal 200a.
  • IC card 300a has control instruction generating section 310 that generates a control instruction, encryption processing section 320 that has a deencryption section and transmits a verification result to control instruction generating section 310, storage section 330 that stores information (for example, personal information, control instruction and public key of each terminal), and terminal control section 340 that issues a control instruction to portable terminal 200a.
  • connection between portable terminal 200a and IC card 300a supports contact type and non-contact type. In other words, it is not required necessarily to insert IC card 300a to a slot of portable terminal 200a.
  • Issue instruction generating section 110 in external terminal 100a generates an issue instruction for portable terminal 200a to output to transmitting section 130.
  • a signature by external terminal 100a is added to the issue instruction, whose data integrity is assured.
  • the issue instruction may include data input manually.
  • Transmitting section 130 transmits the received issue instruction to receiving section 220 in portable terminal 200a.
  • Receiving section 220 transmits the received issue instruction to control instruction generating section 310 in IC card 300a.
  • Control instruction generating section 310 outputs the received issue instruction to encryption processing section 320.
  • Encryption processing section 320 fetches a public key of external terminal 100a from storage section 330 to verify the signature, and performs signature verification of the received issue instruction and authentication of the external terminal. When the signature verification succeeds, the received issue instruction has the integrity. Encryption processing section 320 outputs the result to control instruction generating section 310.
  • control instruction generating section 310 acquires a control instruction stored in storage section 330, according to the issue instruction from external terminal 100a.
  • control instruction generating section 310 may generate a control instruction, or may select and extract one or more from one or more control instructions stored beforehand.
  • Control instruction generating section 310 outputs the acquired control instruction to terminal control section 340.
  • Terminal control section 340 transmits a control instruction to instruction executing section 230 in portable terminal 200a.
  • Instruction executing section 230 executes the control instruction from terminal control section 340.
  • a result of execution (execution result) of the control instruction is output to display section 250 when the result needs to be displayed, while being output to transmitting section 210 when the result needs to be transmitted to receiving section 140 in external terminal 100a and/or other terminal/apparatus 400, depending on the type of the result.
  • Log of the execution result is transmitted to control instruction generating section 310 in IC card 300a.
  • instruction executing section 230 is capable of referring to, modifying, deleting and/or storing information in storage section 240 when necessary. Further, the section 230 is capable of accessing to an external terminal (not shown) and/or external storage medium (not shown) connected to the terminal 200a, in executing a control instruction.
  • Control instruction generating section 310 stores the log of the execution result in storage section 330.
  • Display section 250 receives the execution result or information stored in storage section 240 from instruction executing section 230 to display. Meanwhile, transmitting section 210 transmits the execution result to terminal/apparatus 400 and/or receiving section 140 in external terminal 100a, corresponding to the issued control instruction or information that designates a transmission destination.
  • Terminal/apparatus 400 that has received the execution result performs processing for each terminal/apparatus using the execution result.
  • the processing by terminal/apparatus 400 includes computation, output, storage, input and control function.
  • FIG.3 shows external terminal 100a and terminal/apparatus 400 as separate devices, external terminal 100a and terminal/apparatus 400 may be integrated.
  • Receiving section 140 in external terminal 100a outputs the received execution result to output section 120.
  • Output section 120 outputs the execution result from receiving section 140.
  • the operation rule is an auxiliary function for constructing environments individually such that a plurality of control instructions is operated by a single control instruction and that an unused control instruction is suspended.
  • the operation rule information is information indicating the operation rule.
  • Input section 260 transmits the operation rule information and personal information corresponding to a control instruction stored in storage section 330 to control instruction generating section 310.
  • a method of transmitting the operation rule information is not limited to the foregoing.
  • the operation rule information may be transmitted from another section other than input section 260 via portable terminal 200a, or transmitted from an apparatus connected to portable terminal 200a.
  • portable terminal 200a has a reader/writer apparatus
  • Control instruction generating section 310 fetches the personal information for authentication from storage section 330 to collate with received personal information.
  • encryption processing section 320 stores the operation rule information in storage section 330.
  • external terminal 100a only controls portable terminal 200a.
  • the terminal 100a is capable of controlling not only portable terminal 200a but also another portable terminal.
  • Reader/writer apparatus 500 transmits a control instruction to store to control instruction generating section 310.
  • the signature is added to the control instruction to store, and data integrity of the instruction is assured.
  • Control instruction generating section 310 outputs the received control instruction to store to encryption processing section 320.
  • Encryption processing section 320 fetches a public key of reader/writer apparatus 500 from storage section 330 to verify the signature, and performs signature verification of the received control instruction to store and authentication.
  • encryption processing section 320 When the data integrity is confirmed and authentication of reader/writer apparatus 500b succeeds, encryption processing section 320 outputs the verification result to control instruction generating section 310. When the verification result is "success", the control instruction is stored in storage section 330. It is thus possible to newly register a control instruction and modify control instructions.
  • reader/writer apparatus 500 first transmits data (deletion information) for designating a control instruction to delete to control instruction generating section 310 in IC card 300a.
  • the signature is added to the deletion information, and data integrity of the information is assured.
  • Control instruction generating section 310 outputs the received deletion information to encryption processing section 320.
  • Encryption processing section 320 fetches a public key of reader/writer apparatus 500 from storage section 330 to verify the signature, and performs signature verification of the received deletion information and authentication. When the data integrity is confirmed and authentication of reader/writer apparatus 500 succeeds, encryption processing section 320 outputs the verification result to control instruction generating section 310.
  • control instruction generating section 310 deletes the control instruction designated by the deletion information from storage section 330.
  • Each data as described above exchanged in this embodiment is as shown in FIG.4.
  • FIG.5 is a block diagram illustrating a configuration of an apparatus control system according to the third embodiment of the present invention.
  • This embodiment explains a case where an IC card controls a portable terminal by external operation, and acquires position information of the portable terminal.
  • An apparatus control system in this embodiment has the same basic configuration as that of the apparatus control system explained in the second embodiment, and has a configuration provided with general subscriber telephone 100b as external terminal 100a that has a role as a trigger for making portable terminal 200a execute predetermined processing, and cellular telephone 200b as portable terminal 200a. This embodiment is explained on the assumption that IC card 300c is connected to cellular telephone 200b to perform communications.
  • General subscriber telephone 100b has issue instruction generating section (for example, push buttons) 110, output section (for example, display or speaker) 120, transmitting section 130, receiving section 140 and a section (not shown) for issuing a telephone number of the telephone 100b to a communicating party.
  • instruction generating section for example, push buttons
  • output section for example, display or speaker
  • transmitting section 130 for example, receiving section 140
  • receiving section 140 for issuing a telephone number of the telephone 100b to a communicating party.
  • PSTN Public Switched Telephone Network
  • Examples of the external terminal include terminals capable of performing communications using the PSTN such as a cellular telephone, PDA (Personal Digital Assistant) personal computer, and general pay telephone.
  • PSTN Public Switched Telephone Network
  • Cellular telephone 200b has transmitting section 210 and receiving section 220 to communicate with outside, storage section 240, display section 250, input section 260, position information acquiring section 270 having GPS (Global Positioning System) function or PHS position information function (for acquiring position information using a base station, etc.), instruction executing section 230a, and an internally provided interface (not shown) for communicating data with IC card 300b.
  • Input section 260 denotes, for example, a keyboard, pen or mouse.
  • Display section 250 denotes, for example, a display using CRT or liquid-crystal panel.
  • Storage section 240 denotes, for example, a large-capacity storage device such as a nonvolatile memory and hard disk.
  • IC card 300b has control instruction generating section 310 that generates a control instruction, encryption processing section 320 that has deencryption section, storage section 330 that has a memory to store data (for example, control instruction for controlling the cellular telephone, control instruction for acquiring position information of the cellular telephone and personal information), terminal control section 340 and an interface (not shown) enabling connections with another apparatus.
  • the deencryption processing used in encryption section 320 includes a public key encryption scheme or common key encryption scheme, for example.
  • control instruction generating section 310 may generate a control instruction, or may select and extract one or more from one or more control instructions stored beforehand.
  • Storage section 330 is capable of storing one control instruction or more within an upper limit of the memory capacity. Further, the section 330 is capable of managing one or more control instructions for each instruction, and therefore, performing addition, deletion and modification readily.
  • the personal information includes, for example, caller telephone number, biometrics information such as fingerprint and iris, an ID assigned to a device such as SIM (Subscriber Identity Module), WIM (Wireless Identity Module) and UIM (User Identity Module) card, and information such as a password that a user sets individually.
  • SIM Subscriber Identity Module
  • WIM Wireless Identity Module
  • UIM User Identity Module
  • Issue instruction generating section 110 in general subscriber telephone 100b generates an issue instruction including the caller telephone number, signature and control instruction designating information for cellular telephone 200b whose position information is required to output to transmitting section 130 (step S1100).
  • the contents of the issue instruction to transmit are acquired from inputs from the input device such as a keyboard, pen and mouse.
  • the control instruction designating information indicates a number corresponding to the control instruction designated as an extraction target among control instructions stored in storage section 330 in IC card 300b, and is referred to when storage section 330 extracts a control instruction. The extraction is explained later on the control instruction based on the issue instruction including the control instruction designating information.
  • general subscriber telephone 100b has a reader/writer apparatus
  • the reader/writer apparatus may read the contents of an issue instruction to transmit from the information storage device to acquire.
  • contents of issue instructions to transmit are not limited to the foregoing.
  • Combinations of contents of control instructions are capable of being modified by adjusting a format so that IC card 300b supports the format.
  • issue instruction generating section 110 When issue instruction generating section 110 generates an issue instruction to transmit, it is possible to extract information from a device that stores the information such as a memory card to generate the instruction, instead of using devices such as a keyboard, pen and mouse.
  • Transmitting section 130 transmits the generated issue instruction to receiving section 220 in cellular telephone 200b (step S1200).
  • Receiving section 220 transfers the issue instruction from transmitting section 130 in general subscriber telephone 100b to control instruction generating section 310 in IC card 300b (step S1300).
  • the transferred issue instruction is output from control instruction generating section 310 to encryption processing section 320 (step S1400).
  • Encryption processing section 320 fetches a public key of general subscriber telephone 100b from storage section 330 in IC card 300b (step S1500), and verifies the signature of the received issue instruction. When the signature verification succeeds, the verification result is output to control instruction generating section 310 (step S1600). Meanwhile, when the signature verification fails, the issue instruction from general subscriber telephone 100b is abandoned with the verification result. Accordingly, a wrong issue instruction is not left in cellular telephone 200b.
  • control instruction generating section 310 selects and extracts the control instruction in storage section 330 in IC card 300b (step S1700).
  • FIG.6 is a view showing examples of control instructions stored in storage section 330 in IC card 300b.
  • control instructions stored in storage section 330 are not limited to those as shown in FIG. 6, and include any instructions to control cellular telephone 200b.
  • control instruction designating information indicates a number of "3”
  • control instruction generating section 310 in IC card 300b searches storage section 330 in IC card 300b, and extracts the control instruction of "Location” corresponding to Number "3".
  • control instruction generating section 310 in IC card 300b searches storage section 330 in IC card 300b, and extracts the control instruction of "Location” corresponding to Number "3".
  • only one control instruction is stored in storage section 330, it is possible to extract the control instruction without selecting.
  • Control instruction generating section 310 designates a transmission destination of the execution result and log using the caller telephone number contained in the issue instruction. It is possible to designate the transmission destination of the execution result based on the issue instruction from general subscriber telephone 100b or contents stored beforehand in storage section 300 in IC card 300b. Further, it is possible to transmit the execution result whose transmission destination is designated using a telephone number and mail address via the PSTN, or transmit to an apparatus corresponding to an individual ID using the individual ID that is assigned locally and is identifiable.
  • the information to transmit is not limited to an execution result and log, and may be any information that is transmittable.
  • Control instruction generating section 310 outputs the extracted control instruction to terminal control section 340 in IC card 300b (step S1800).
  • Terminal control section 340 issues the extracted control instruction to instruction executing section 230a in cellular telephone 200b (step S1900).
  • Instruction executing section 230a having received the control instruction executes the control instruction.
  • instruction executing section 230a is capable of executing the control instruction not only by itself but also by cooperating with another section connected to instruction executing section 230a.
  • position information acquiring section 270 connected to instruction executing section 230a acquires the position information according to the control instruction and outputs the acquired position information to instruction executing section 230a, the section 230a performs the predetermined processing using the position information, and that display section 250 displays a map.
  • instruction executing section 230a outputs an execution instruction to position information acquiring section 270 to instruct the section 270 to perform the position information acquisition processing.
  • position information acquiring section 270 outputs the execution result of the position information acquisition processing to instruction executing section 230a (step S2000).
  • position information acquiring section 270 is provided inside cellular telephone 200b
  • the section 270 may be provided outside cellular telephone 200b and connected to cellular telephone 200b to be used. Also in this case, it is possible to execute the same operation as described above.
  • Instruction executing section 230a outputs the acquired position information to transmitting section 210 (step S2100). Further, the section 230a generates log information of the execution result to transmit to control instruction generating section 310 in IC card 300b (step S2200). Control instruction generating section 310 outputs the log information to storage section 330 in IC card 300b to store. Transmitting section 210 transmits the position information to general subscriber telephone 100b (step S2300).
  • receiving section 140 in general subscriber telephone 100b outputs the position information transmitted from cellular telephone 200b to output section 120, and the information is output in an expression manner required by a sender of the instruction (step S2400).
  • the data (herein, position information) transmitted from cellular telephone 200b to general subscriber telephone 100b is multimedia information including text, speech, and/or static image or moving picture that receiving section 140 in general subscriber telephone 100b can receive. Further, for the expression manner of information, the expression manner may be selected by a user or may be judged automatically from information registered beforehand and capability of the apparatus.
  • FIG. 7A to 7N show contents of each data exchanged in the apparatus control system for a period of time during which an issue instruction is generated in a general subscriber telephone, and then a cellular telephone outputs an execution result of a control instruction.
  • the operation rule information will be described below which is information indicates an activation condition of each control instruction.
  • the operation rule information is the same as described in the second embodiment, and the activation condition includes, for example, "control instruction X can be executed only after executing control instruction W", "execution of control instruction Y is prohibited”, "control instruction Z can be executed only a predetermined number of times” or the like.
  • FIG.6 illustrates an example where two control instructions are executed according to one control instruction designating information, and another example where the use of a control instruction is suspended.
  • instruction "Alarm” assigned Number “5" is an instruction to activate the alarm of cellular telephone 200b
  • instruction “Call” assigned Number “6” is an instruction to make a call.
  • Number "4" (instruction "Halt”) is an instruction to turn OFF cellular telephone 200b.
  • Number "4" since Number "4" is set for the operation rule of "suspension", Number "4" cannot be executed even when designated.
  • a user is capable of customizing execution environments individually, and it is thereby possible to respond to various usage circumstances.
  • activation conditions that dynamically vary such as time designation where a control instruction is executed after a lapse of set time, number-of-usage-time designation where a control instruction can be used only the set number of times, precondition designation where a control instruction is only executed after another control instruction is executed, or the like.
  • the activation control it can be defined that a control instruction is executed by external factor such as a case that IC card 300b is inserted and a case that a signal from another apparatus is detected.
  • contents set as operation rules are not limited to the above descriptions, and users are capable of setting various operation rules so as to facilitate using existing instruction operations.
  • a user of general subscriber telephone 100b is capable of controlling the portable terminal (cellular telephone 200b) with the authentication function readily using a familiar device. Further, when the portable terminal (cellular telephone 200b) is lost or stolen, it is made possible for the user to acquire the position information of cellular telephone 200b or to turn off the telephone 200b. Furthermore, by modifying a control instruction stored in IC card 300b, it is made possible to transfer or delete information stored in the memory of cellular telephone 200b. In this way, the above-mentioned apparatus control system is capable of being carried into practice in wide usages.
  • an issue instruction transmitted to IC card 300b is different from a control instruction for cellular telephone 200b, the user of cellular telephone 200b does not have risks such that misoperation occurs in transferring an issue instruction to IC card 300b and that a control instruction is directly output to cellular telephone 200b and executed.
  • IC card 300b Since instructions to control cellular telephone 200b do not meet user's eye directly, cellular telephone manufacturers ensure the confidentiality of codes of control instructions. Moreover, another advantage of using IC card 300b is convenience in carrying, in addition to high confidentiality. Accordingly, it is possible to change user information and control instructions readily by exchanging IC card 300b. Further, when IC card 300b has clearance processing, by performing the processing from IC card 300b, it is possible to prevent leaks of the user information and to lead to enhancement in security. Furthermore, by leaving log information in the tamper-resistant device such as IC card 300b, it is possible to further enhance the above-mentioned security.
  • general subscriber telephone 100b is used as the external terminal
  • cellular telephone 200b is used with IC card 300b as the portable terminal.
  • apparatus control system of the present invention is not limited to the above-mentioned configuration, and any apparatuses can be applied to the apparatus control system of the present invention as long as the apparatuses have the same functions as described above.
  • IC card 300b does not perform processing of control instructions, but it is made possible for the card 300b to perform part of processing of control instructions. Therefore, by directly connecting a section with the GPS function (position information acquiring section 270) to IC card 300b via an interface, it is made possible that IC card 300b executes a control instruction, and the portable terminal (cellular telephone 200b) displays an execution result or further performs an execution result. For example, IC card 300b acquires current position coordinates using the GPS function and transmits the result to the portable terminal (cellular telephone 200b), whereby using the information, the portable terminal (cellular telephone 200b) is capable of displaying and/or transmitting information on a neighborhood public facility or shopping information.
  • a function directly connected to IC card 300b via the interface is not limited to GPS function, and may include functions on the analogy from conventional techniques such as wireless function and IR function. Further, since the processing is performed inside IC card 300b, it is possible to convert an existing control instruction into a control instruction having compatibility among a plurality of portable terminals (cellular telephones 200b). Also, it is possible to add the latest encryption technique.
  • a home server is provided in a home and performs centralized control of all the home electric appliances
  • using the apparatus control system of the present invention enables the home electric appliances in the home to be controlled from outside.
  • first apparatus 100 corresponds to a home server
  • second apparatus 200 corresponds to a home electric appliance
  • third apparatus 300 corresponds to an IC card.
  • the home server receives an issue instruction from an apparatus outside the home, and executes the instruction based on the issue instruction.
  • a home electric appliance with the IC card may be an apparatus constructing a network such as a home server, router and hub.
  • using an apparatus on the home network as the base enables control of other home electric appliances having the IC card.
  • an IC card stores instructions of other home electric appliances, it is possible to control the other home electric appliances besides the home electric appliance to which the IC card is connected.
  • second apparatus 200 is low in security principally.
  • third apparatus 300 is high in security. Accordingly, it is assumed that second apparatus 200 has third apparatus 300 determine whether to execute processing.
  • second apparatus 200 may be possible to provide second apparatus 200 with roles of adjustment or receipt for the entire system, and third apparatus 300 receives an instruction from second apparatus 200 to execute the processing.
  • an example is a configuration in FIG.2 provided with an apparatus outside the home as first apparatus 100, a home server as second apparatus 200, and a home electric appliance as third apparatus 300. Also in this case, it is possible to control each home electrical appliance in the same way as in the example described above.
  • control the portable terminal using the read control instruction make the portable terminal perform the processing and obtain the execution result. Accordingly, it is possible to also control another terminal connected to the portable terminal, and establish a control system where an IC card controls a portable terminal with authentication of external terminal and integrity of data exchanged between terminals assured and with high security. Since the IC card stores control instructions, it is possible to take advantages of data confidentiality that the device i.e. IC card has. Further, since a plurality of control instructions is stored, it is possible to control various apparatuses using various control instructions.
  • a cellular telephone can be operated using a familiar and convenient terminal such as a telephone, PDA and personal computer as the external terminal. Further, since remote control is made possible, advantages are taken of the control in the case where a cellular telephone is lost or stolen for the personal use, while being taken of the control in the case of performing rental business of cellular telephone or managing sales persons making the rounds for the business use, and the convenience is thus improved.
  • control instructions are only stored inside an IC card, cellular telephone manufactures are capable of ensuring the confidentiality of control instructions without directly exposing the instructions to user's eye. According to the above mentioned effectiveness, the present invention has the significance.
  • the present invention is ideally suited to the field of an apparatus control system in which a portable terminal is controlled in security by an external terminal.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Computing Systems (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Telephone Function (AREA)
  • Telephonic Communication Services (AREA)
EP03010492A 2002-05-10 2003-05-09 Gerätesteuerungssystem Withdrawn EP1361508A1 (de)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
JP2002135120A JP3966070B2 (ja) 2002-05-10 2002-05-10 機器制御システム及び携帯端末
JP2002135120 2002-05-10

Publications (1)

Publication Number Publication Date
EP1361508A1 true EP1361508A1 (de) 2003-11-12

Family

ID=29244220

Family Applications (1)

Application Number Title Priority Date Filing Date
EP03010492A Withdrawn EP1361508A1 (de) 2002-05-10 2003-05-09 Gerätesteuerungssystem

Country Status (5)

Country Link
US (1) US20040030761A1 (de)
EP (1) EP1361508A1 (de)
JP (1) JP3966070B2 (de)
KR (1) KR100629036B1 (de)
CN (1) CN1241129C (de)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8745408B2 (en) 2011-04-08 2014-06-03 Infineon Technologies Ag Instruction encryption/decryption arrangement and method with iterative encryption/decryption key update

Families Citing this family (10)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP4199802B2 (ja) * 2004-03-19 2008-12-24 パイオニア株式会社 携帯型情報処理装置
US7796949B2 (en) * 2004-05-21 2010-09-14 Panasonic Corporation Wireless communications terminal, communications protocol switching method, communications protocol switching program, and integrated circuit of wireless communications terminal
US7972279B2 (en) 2005-01-27 2011-07-05 Instrumentation Laboratory Company Method and system for managing patient data
JP2007183767A (ja) * 2006-01-05 2007-07-19 Fujitsu Ltd 生体情報削除方法及びそのシステム
ES2672382T3 (es) 2010-03-13 2018-06-14 Able Device, Inc. Sistemas de control que tienen un SIM para controlar un dispositivo informático
US8667100B2 (en) * 2010-07-07 2014-03-04 Comcast Interactive Media, Llc Device communication, monitoring and control architecture and method
US8478338B2 (en) * 2011-02-04 2013-07-02 Jayn International Pte Ltd. Method for remotely and automatically erasing information stored in SIM-card of a mobile phone
JP5845457B2 (ja) * 2011-05-24 2016-01-20 パナソニックＩｐマネジメント株式会社 機器制御システム、移動端末およびプログラム
CN109981733A (zh) * 2019-02-19 2019-07-05 广州勒夫蔓德电器有限公司 智能终端设备的控制方法、服务器及计算机可读存储介质
CN111935307B (zh) * 2020-09-16 2021-01-05 湖南新云网科技有限公司 硬件设备远程控制方法及装置、存储介质、透明计算系统

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5418837A (en) * 1993-07-30 1995-05-23 Ericsson-Ge Mobile Communications Inc. Method and apparatus for upgrading cellular mobile telephones
US5845114A (en) * 1997-01-08 1998-12-01 Telxon Corporation PC card initialization for microprocessor based devices
US6092133A (en) * 1996-12-17 2000-07-18 Nokia Mobile Phones Ltd Method for conveying control commands for SIM card from external apparatus to SIM card

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
FI104937B (fi) * 1997-01-27 2000-04-28 Sonera Oyj Tilaajaidentiteettimoduuli, matkaviestin ja menetelmä älykorttitoiminteen suorittamiseksi
FR2767626B1 (fr) * 1997-08-25 1999-10-15 Alsthom Cge Alcatel Terminal radiotelephonique a carte d'identification d'abonne
ES2333070T3 (es) * 1998-09-10 2010-02-16 Swisscom Ag Procedimiento para la compra de articulos o servicios mediante un telefono movil.
FR2787273B1 (fr) * 1998-12-14 2001-02-16 Sagem Procede de paiement securise
SE522260C2 (sv) * 1999-10-01 2004-01-27 Ericsson Telefon Ab L M Metod, system och säkerhetsadapter för att exekvera säker dataöverföring i ett trådlöst nät
FR2810482B1 (fr) * 2000-06-15 2003-05-16 Sagem Procede de gestion d'un module de communication et dispositif comportant un tel module
US20030055738A1 (en) * 2001-04-04 2003-03-20 Microcell I5 Inc. Method and system for effecting an electronic transaction
US6782251B2 (en) * 2002-09-26 2004-08-24 Motorola Inc. Method and apparatus for operating a lost mobile communication device

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5418837A (en) * 1993-07-30 1995-05-23 Ericsson-Ge Mobile Communications Inc. Method and apparatus for upgrading cellular mobile telephones
US6092133A (en) * 1996-12-17 2000-07-18 Nokia Mobile Phones Ltd Method for conveying control commands for SIM card from external apparatus to SIM card
US5845114A (en) * 1997-01-08 1998-12-01 Telxon Corporation PC card initialization for microprocessor based devices

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US8745408B2 (en) 2011-04-08 2014-06-03 Infineon Technologies Ag Instruction encryption/decryption arrangement and method with iterative encryption/decryption key update

Also Published As

Publication number Publication date
KR100629036B1 (ko) 2006-09-26
JP2003333651A (ja) 2003-11-21
JP3966070B2 (ja) 2007-08-29
CN1241129C (zh) 2006-02-08
KR20030087989A (ko) 2003-11-15
CN1469264A (zh) 2004-01-21
US20040030761A1 (en) 2004-02-12

Similar Documents

Publication Publication Date Title
US8611858B2 (en) Mobile terminal that allows a server to manage confidential information
EP1517569B1 (de) System und Verfahren zur Speicherung und Verwaltung von persönlichen Daten
EP1276339A1 (de) System zum herunterladen eines programms an das teilnehmeridentifikationsmodul
JP5079377B2 (ja) 情報処理システム、管理情報処理装置、およびプログラム
CN101164356A (zh) 改进无线通信的安全性
JP4615474B2 (ja) 通信端末、ユーザデータ移動システム及びユーザデータ移動方法
CN107820247A (zh) 将安全数据包发送到通信设备的方法和设备
JP2008294976A (ja) 携帯端末、携帯端末管理システムおよびデータ保存方法
EP1361508A1 (de) Gerätesteuerungssystem
JP5731883B2 (ja) 端末設置システム及び端末設置方法
EP1860605A1 (de) Elektronisches geldsystem, informationsspeichermedium und mobiles endgerät
US20160381495A1 (en) Application management system with contactless wrist
KR100639742B1 (ko) 전자 정보 인증 시스템, 휴대 정보 단말기 및 이들에이용하는 전자 정보 인증 방법
FI121196B (fi) Menetelmä ja järjestelmä älykortin arvon lataamiseen
JP2005301454A (ja) ユーザ認証システムおよび充電器兼無線ｉｃチップリーダ
US20080272187A1 (en) Electronic Money System, Information Storage Medium, and Mobile Terminal Device
JP2005064923A (ja) Ｉｃカードを用いたサービスシステム
JP2004112478A (ja) 携帯端末のデータバックアップシステム
JP5274028B2 (ja) 取引システム、取引方法
JP2003143289A (ja) 情報端末およびその通信方法
JP2003203056A (ja) ユーザクライアントサーバシステム
JP2019079293A (ja) 携帯端末へのサービスアプリケーション発行システムおよびサービスアプリケーション発行方法
JP2005174215A (ja) セキュアデバイスと情報処理装置と端末装置
JP5705958B2 (ja) 情報処理システム、管理情報処理装置、およびプログラム
JP5450740B2 (ja) 情報処理システム、管理情報処理装置、およびプログラム

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

AK Designated contracting states

Kind code of ref document: A1

Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IT LI LU MC NL PT RO SE SI SK TR

AX Request for extension of the european patent

Extension state: AL LT LV MK

17P Request for examination filed

Effective date: 20031222

AKX Designation fees paid

Designated state(s): DE FR GB

17Q First examination report despatched

Effective date: 20060130

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20070711